
$ rpki-client -vvf rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
File: 70EA909324397A558577D3D460D16896E1F7AA80.mft (raw, json)
Hash identifier: DOgZ3Nzt1O3aGMqpKE0uBX7RM8wOqj72vJeWc8IpPi8=
Subject key identifier: 85:86:A3:16:9D:C2:54:A5:80:2C:B8:1D:5B:A1:82:46:4B:36:7D:06
Authority key identifier: 70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80
Certificate issuer: /CN=70EA909324397A558577D3D460D16896E1F7AA80
Certificate serial: 1DDF764FDB877FA0867839084F01B72406F9704C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
Manifest number: 9F
Signing time: Thu 26 Mar 2026 03:49:55 +0000
Manifest this update: Thu 26 Mar 2026 03:44:55 +0000
Manifest next update: Fri 27 Mar 2026 05:00:55 +0000
Files and hashes: 1: 70EA909324397A558577D3D460D16896E1F7AA80.crl (hash: wUkwCCczMzqO2TsOzbFHfbE8jWAngb7bDZGOjFplrVI=)
2: 3133312e3130382e34342e302f32322d3332203d3e203631363630.roa (hash: WjtjCe7u8GJQPVsEsI0q2pziTz+jHxgiJR2ggY4eWcc=)
3: 323830343a316338383a3a2f33322d313238203d3e203631363630.roa (hash: ciIZ7+5aFK1VskvVeNJ0NtH7WWv4twJoDLKAnGCLAbw=)
4: 3133382e3138352e3130302e302f32322d3332203d3e203631363630.roa (hash: ROo4XSnyWREyyJBi9BxrvTbZS2bs1v6uVbTRNR0oqOg=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.crl
rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 27 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:df:76:4f:db:87:7f:a0:86:78:39:08:4f:01:b7:24:06:f9:70:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70EA909324397A558577D3D460D16896E1F7AA80
Validity
Not Before: Mar 26 03:44:55 2026 GMT
Not After : Mar 27 05:00:55 2026 GMT
Subject: CN=8586A3169DC254A5802CB81D5BA182464B367D06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4e:6d:3c:63:2c:ed:6a:7d:6e:05:22:3a:0a:
10:af:d7:aa:cc:c9:e4:c5:ed:b2:a8:8f:9c:bd:6f:
89:89:ad:b4:5c:e5:d2:e4:13:55:89:e1:70:db:9a:
46:9a:66:6a:cf:ba:85:a0:c1:c7:65:70:c4:37:65:
20:3c:be:32:99:a8:85:61:9e:84:a5:9f:87:71:51:
45:1c:a0:a9:04:2e:29:e4:15:ff:bb:4a:0c:ff:5e:
02:ef:d8:4b:34:97:4d:e7:c6:ca:6e:77:e8:e3:28:
5a:f0:73:d4:65:c3:c5:1b:48:10:2d:3b:09:01:67:
7d:7b:6e:af:96:49:94:85:c8:8e:23:82:29:55:77:
6b:1e:8e:54:c2:a2:96:8a:5e:30:46:0a:04:18:8c:
79:cf:30:5b:8e:74:11:5f:11:6d:5b:eb:1a:4b:db:
65:fb:10:bd:65:ac:10:39:ca:18:11:09:26:f9:28:
b9:9b:11:d7:d7:f3:dc:d2:0b:b4:1b:f0:a8:fa:2f:
c1:a6:1c:6c:d4:50:5b:73:ce:38:cf:b7:ab:4b:59:
3a:94:55:fc:11:8c:c6:e0:15:3b:2e:54:15:ad:74:
98:bc:ff:91:ac:2b:56:40:e9:2d:44:50:9c:7d:69:
c6:4d:e3:49:29:26:de:cf:e6:4d:2e:31:de:05:de:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:A3:16:9D:C2:54:A5:80:2C:B8:1D:5B:A1:82:46:4B:36:7D:06
X509v3 Authority Key Identifier:
keyid:70:EA:90:93:24:39:7A:55:85:77:D3:D4:60:D1:68:96:E1:F7:AA:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EA909324397A558577D3D460D16896E1F7AA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GWGbHQn8GqfkkFRJfdChXhJRg4PaJ35DLFKwiktoZRn/0/70EA909324397A558577D3D460D16896E1F7AA80.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b6:e9:35:48:8a:38:39:60:3d:d8:1e:e8:6c:83:33:fd:f9:
1f:07:c1:c9:f3:4b:41:2a:56:87:8a:c4:55:4b:d0:d0:0e:4b:
1a:df:8b:59:56:36:bf:ad:c9:93:6c:47:33:8c:47:21:1b:c2:
21:81:49:30:7a:a8:dc:3f:56:52:5a:4f:58:82:0c:d5:1a:a3:
e2:54:cf:d0:35:40:39:46:3d:9d:19:56:6e:a6:99:c0:4d:b0:
47:73:d9:d5:1d:50:80:b6:26:f7:32:ff:8d:4a:05:9d:0c:a2:
e4:cf:fb:23:f5:eb:c6:66:51:aa:cd:79:22:4b:12:15:7d:ba:
0b:d8:7f:63:7b:15:50:2e:da:21:ce:15:40:3e:3d:23:57:d8:
cc:ae:4c:79:d3:6d:b1:d6:2f:dd:c2:f0:da:ce:aa:d8:d4:3d:
62:4b:d1:38:44:90:8d:1c:68:07:2b:59:44:c9:58:cd:6a:bf:
1e:85:b9:af:89:8b:af:07:54:1b:0f:45:b6:5d:5c:03:84:93:
dd:07:f1:e7:d4:3c:8d:29:cd:31:b4:0c:93:e4:b0:ec:4f:d5:
fd:23:c9:f4:6c:e0:82:87:14:c6:b7:fd:59:54:e0:bb:c6:82:
cd:21:b9:6e:9b:3d:5e:7a:e6:82:d3:5c:b2:5a:2c:e2:13:17:
0f:d6:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:42:29 2026 by rpki-client